chore(deps): bump anthropics/claude-code-action from 1.0.145 to 1.0.159

[dependabot]

Bumps anthropics/claude-code-action from 1.0.145 to 1.0.159.

Release notes

Sourced from anthropics/claude-code-action's releases.

v1.0.159

What's Changed

• fix: bound app token revocation cleanup by @​tarunag10 in anthropics/claude-code-action#1437

New Contributors

• @​tarunag10 made their first contribution in anthropics/claude-code-action#1437

Full Changelog: anthropics/claude-code-action@v1...v1.0.159

v1.0.158

Full Changelog: anthropics/claude-code-action@v1...v1.0.158

v1.0.157

Full Changelog: anthropics/claude-code-action@v1...v1.0.157

v1.0.156

Full Changelog: anthropics/claude-code-action@v1...v1.0.156

v1.0.155

What's Changed

• fix: filter PR reviews and inline review comments to trigger time by @​EffortlessSteven in anthropics/claude-code-action#1385
• test: cover format-turns content-type fallbacks and system_other handling by @​farmer-data in anthropics/claude-code-action#1421
• fix: allow @ in branch names (valid per git-check-ref-format) by @​bellalMohamed in anthropics/claude-code-action#1411

New Contributors

• @​EffortlessSteven made their first contribution in anthropics/claude-code-action#1385
• @​farmer-data made their first contribution in anthropics/claude-code-action#1421
• @​bellalMohamed made their first contribution in anthropics/claude-code-action#1411

Full Changelog: anthropics/claude-code-action@v1...v1.0.155

v1.0.154

Full Changelog: anthropics/claude-code-action@v1...v1.0.154

v1.0.153

Full Changelog: anthropics/claude-code-action@v1...v1.0.153

v1.0.152

Full Changelog: anthropics/claude-code-action@v1...v1.0.152

v1.0.151

What's Changed

• fix: skip workflow validation token exchange failures by @​Ryanoonan in anthropics/claude-code-action#1417

New Contributors

• @​Ryanoonan made their first contribution in anthropics/claude-code-action#1417

Full Changelog: anthropics/claude-code-action@v1...v1.0.151

v1.0.150

... (truncated)

Commits

• a92e7c7 chore: bump Claude Code to 2.1.195 and Agent SDK to 0.3.195
• f8076dc fix: bound app token revocation cleanup (#1437)
• 5211368 chore: bump Claude Code to 2.1.193 and Agent SDK to 0.3.193
• 428971d chore: bump Claude Code to 2.1.191 and Agent SDK to 0.3.191
• 74eedf1 chore: bump Claude Code to 2.1.190 and Agent SDK to 0.3.190
• 80b3182 chore: bump Claude Code to 2.1.187 and Agent SDK to 0.3.187
• 360be9c fix: allow @ in branch names (valid per git-check-ref-format) (#1411)
• e452eb9 test: cover format-turns content-type fallbacks and system_other handling (#1...
• 6b80630 fix: filter PR reviews and inline review comments to trigger time (#1385)
• 30544b6 chore: bump Claude Code to 2.1.186 and Agent SDK to 0.3.186
• Additional commits viewable in compare view

[operon-ensemble-reviewer]

Ensemble Code Review

Verdict: approve

Summary: This is a Dependabot version bump of the external anthropics/claude-code-action GitHub Action from v1.0.145 to v1.0.158, updating a single pinned commit SHA and its version comment. The Verifier read the full workflow and confirmed the new SHA/tag are consistent with no stale references remaining; all three reviewers approved. No correctness, security, or contract concerns.

Findings (none — all reviewers approved)

The Verifier read the changed workflow file directly and confirmed the old SHA is fully replaced, the new SHA and version tag are consistent, and no other files reference the action. The action remains pinned to a specific SHA (good supply-chain hygiene), and secrets usage is unchanged. No correctness, security, or breaking-change issues found.

---

Suggestions (2)

• Skim the upstream anthropics/claude-code-action v1.0.146–158 release notes for any new/renamed with: inputs or new permissions, and confirm the inputs passed in the workflow remain valid. (Pattern, Architect)
• Confirm anthropic_api_key remains scoped appropriately and is sourced from an Actions secret rather than a repo/environment default. (Pattern)

---

Generated by Operon Ensemble Code Review.

[operon-ensemble-reviewer]

Ensemble Code Review

Verdict: approve

Summary: This is a Dependabot bump of the external anthropics/claude-code-action GitHub Action in .github/workflows/claude-code-review.yml, updating a single pinned commit SHA and its version comment. The Verifier read the workflow directly and confirmed the old SHA is fully replaced, the new SHA matches the v1.0.159 comment, and inputs/permissions are unchanged. All three reviewers approved; no correctness, security, or contract concerns.

Findings (none — all reviewers approved)

The Verifier read the changed workflow file directly and confirmed the old SHA (ebcdfe6...) is fully replaced, the new SHA and version comment are consistent, and no other files reference the action or the old SHA. The action remains pinned by SHA (good supply-chain hygiene), and secrets/permissions usage is unchanged. Note: the PR title says "1.0.158" but the diff actually pins to v1.0.159 — a benign title/release race, no action needed.

---

Suggestions (2)

• Skim the upstream anthropics/claude-code-action v1.0.145→v1.0.159 changelog for any new/renamed/required with: inputs, changed defaults, or trigger-semantics changes, and confirm this workflow's existing with: block remains valid. (Pattern, Architect)
• Confirm secrets.ANTHROPIC_API_KEY remains the minimal-scope secret for this action (org/repo secret, not reused more broadly than necessary). (Pattern)

---

Generated by Operon Ensemble Code Review.

[dependabot]

Superseded by #670.